How to remove DisableDefender.exe
- File Details
- Overview
- Analysis
DisableDefender.exe
The module DisableDefender.exe has been detected as Trojan.PowerShell
File Details
| Product Name: |
|
| MD5: |
f87227007d3dea93f22dfd0056abf531 |
| Size: |
20 KB |
| First Published: |
2024-07-29 23:03:10 (a year ago) |
| Latest Published: |
2024-12-25 23:01:45 (11 months ago) |
| Status: |
Trojan.PowerShell (on last analysis) |
|
| Analysis Date: |
2024-12-25 23:01:45 (11 months ago) |
Overview
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00002cfa |
| MVID: |
e4b32ce2-14d9-4943-a035-79dc4f839344 |
| Typelib ID: |
03a8f70b-e7c0-477e-988e-7c58e1b112db |
| Name |
Size of data |
MD5 |
| .text |
3584 |
9ab6931bb91cc5e823abae4bbfe82a4b |
| .rsrc |
4608 |
d560e502a055d3bc98ecb79f7ec68f2e |
| .reloc |
512 |
58af2fbe860513935eb297e253ecaf4c |